RLSA-2021:3151

Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2021:3151.json
Related
Published
2021-08-16T08:00:18Z
Modified
2023-02-02T14:09:42.174498Z
Summary
Important: sssd security update
Details

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: shell command injection in sssctl (CVE-2021-3621)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

Rocky Linux:8 / sssd

Package

Name
sssd

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0:2.4.0-9.el8_4.2